Since this week, OIDC authentication doesnt work on MongoDB Compass

Stanley_Hui · 2024-06-27T01:28:00.213Z

We configured OIDC authentication on mongodb v7 of Atlas.
SSO login worked for mongodb compass, mongo shell and pymonogo (python driver) as well.

Since this week, “Preview” wording was removed from mongodb atlas, but we could not login with compass and mongoshell anymore.
Error: AADSTS70011: The provided request must include a ‘scope’ input parameter. The provided value for the input parameter ‘scope’ is not valid. The scope openid offline_access xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/.default xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/mongodb xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/default is not valid. .default scope can’t be combined with resource-specific scopes.

(pymongo DB connection is still working)

one more thing, when I clicked “Connect” on Atlas, “Compass (GUI)” and “MongoDB for VS Code” are dimmed out for OIDC DB user.

Is there any change on mongodb side?

Basit_Chonka · 2024-06-27T13:15:38.761Z

Hi @Stanley_Hui,

thank you for reporting this issue. In order to reproduce this issue we need more information from your side. Could you please create a Compass JIRA ticket and provide us with the following information:

Compass logs. You can find instructions on how to get them here.
Link to the Atlas Cluster you are using.

Thank you.

Stanley_Hui · 2024-06-28T16:54:22.917Z

Hi @Basit_Chonka

Thanks for your reply.
We’ve resolved the issue by removing some extra scopes of OIDC authentication.
we could login to DB cluster via mongo cluster and pymongo now.

Naveenkumar_Muniraj · 2024-07-31T12:05:39.345Z

I have a doubt, is it possible to connect the Mongo cluster from Linux VM using OIDC authentication mechanism?